Prototype Pollution

2024-06-1807:28:00

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

badger-database

execute code

object prototypes

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

@abw/badger-database is vulnerable to Prototype Pollution. The vulnerability is due to a flaw in the file dist/badger-database.esm, which allows an attacker to execute arbitrary code by manipulating object prototypes.

CPENameOperatorVersion
@abw/badger-databasele1.2.5
@abw/badger-databasele1.2.5

CPE	Name	Operator	Version
	@abw/badger-database	le	1.2.5
	@abw/badger-database	le	1.2.5

References

gist.github.com/mestrtee/f6b2ed1b3b4bc0df994c7455fc6110bd

github.com/abw/badger-database-js/issues/1

github.com/advisories/GHSA-69r2-2fg7-7hf9